Overview

overview

10

Static

static

10

Aqua.arm5.elf

debian-9-armhf

7

Analysis

  • max time kernel
    132s
  • max time network
    141s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29-12-2024 00:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Aqua.arm5.elf

  • Size

    50KB

  • MD5

    28b33953eeba596232ac1f337e77c80f

  • SHA1

    7908589cb7c18435eaed49e1c85674450be4841c

  • SHA256

    cc786f9c3253f08256deba595562a2de74a8f7120b323c5aa4fe82382c82790a

  • SHA512

    3f9ef1e1abc9e22f6872e2303fd02a41cbf2e1b0241c152945250581fa268d53f0b5532590145fe10466d0f0b1228ec96bab90a811354f18727908199f1fd334

  • SSDEEP

    768:KnW/fMXkTqmqupGE/rVVm2zDa0ijTa/DoWlcpMEnRSl4SnMQCV+MKfQWuH1TyIU:J/f8kTXqGFXDaoEbUiPVOQlHpy1

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/Aqua.arm5.elf
    /tmp/Aqua.arm5.elf
    1⤵
    • Deletes itself
    • Changes its process name
    PID:657

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads